fix(review): confine every ledger and evidence read to contained regular files - #9163

Closed

wenshao wants to merge 37 commits into

review-resume/3-wiringfrom

review-resume/4-containment

Commits on Aug 16, 2026

feat(review): resume an interrupted PR review from its on-disk state
wenshao
committed
bc402c7
fix(review): surface restart count, cross-cap resumes, refuse effort changes
wenshao
committed
42ad1ea
fix(review): refuse a dirty worktree, and make the resume bookkeeping falsifiable
wenshao
committed
a0684ab
test(review): build the recovery fixtures with the real writers
wenshao
committed
5728cbb
fix(review): make the resume cap real and the recovery bar the pipeline's own
wenshao
committed
3561906
fix(review): create the recovery output's parent, drop a dead field, pin the unpinned
wenshao
committed
6b2d595
fix(review): round-3 blockers on the resume wiring
wenshao
committed
a584d44
fix(review): parse the chunk out of per-chunk audit keys
wenshao
committed
18502bf
fix(review): align the recovery veto and floor routing with the pipeline authorities
wenshao
committed
d84d33c
fix(review): resume state is untrusted where the reviewed code ran
wenshao
committed
df5fde2
test(review): carry hasReviewDeadline through the deadline mock
wenshao
committed
3074fdc
fix(review): pin the resume probes and verify every report field they consume
wenshao
committed
ed28d2a
fix(review): compare the rest of the resumed report; fail recovery closed
wenshao
committed
8581b12

Commits on Aug 17, 2026

Commits on Aug 18, 2026